Saturday, June 3, 2017

Hook function calls by replacing PLT(Procedure Linkage Table) entries.

What is plthook.

A utility library to hook library function calls issued by specified object files (executable and libraries). This modifies PLT (Procedure Linkage Table) entries in ELF format used on most Unixes or IAT (Import Address Table) entries in PE format used on Windows.

No comments: